chrome-bridge-automation

skills-sh:web-infra-dev_midscene-skills__chrome-bridge-automation

View source

77/100

First Seen

Feb 20, 2026

Last Scanned

Feb 20, 2026

Findings

Score

77/100

HIGH 1

MEDIUM 1

Findings (2)

HIGH

Autonomous agent spawning PROMPT_INJECTION_017

prompt-injection L15

Detects autonomous sub-agent or cron-based execution without human oversight

Background execution + autonomous

FIX

Remove directives that force the agent to call specific tools or APIs not required for the skill's stated functionality. Tool calls should be determined by user intent, not embedded directives.

FP?

Likely FP if the skill legitimately needs to call other tools as part of its workflow (e.g., a deployment skill that calls git and cloud CLI tools).

MEDIUM

Section claims authority and urgency with dangerous instructions NLP_AUTHORITY_CLAIM

prompt-injection L1

Section claims authority and urgency with dangerous instructions

skills
/
web-infra-dev
/
midscene-skills
/
Chrome Bridge Automation
Chrome Bridge Automation
$
npx skills add https://github.com/web-infra-dev/midscene-skills --skill 'Chrome Bridge Automation'
SKILL....

FIX

Remove false authority claims (e.g., claiming administrator or root-level access) from tool descriptions. Tool descriptions should describe capabilities, not claim elevated roles.

FP?

Likely FP if the matched text is documentation explaining role-based access control concepts or describing user personas, not impersonating a system role.